It attempted to perform a SSDP amplification attack on the SSH server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

The IP sent numerous VOIP OPTIONS requests in a short time.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

It attempted to perform Session Sidejacking attacks on the Apache server.

The IP address attempted to login to the SSH server with an invalid username.

The IP address attempted to login to the FTP server with an invalid username.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

We observed the IP distributing harmful document tracking tools.

This IP belongs to AT&T.

This IP belongs to Comcast.

It attempted to send emails with deceptive subject lines from the Mail server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It attempted to perform a SIP Register Flood on the Asterisk server.

It made multiple requests with the same Expect header.

The IP attempted to upload malicious files to the FTP server.

This IP belongs to American Airlines Group.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.